
$ rpki-client -vvf rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/ADBB651E043411ED9F02B325C4F9AE02.roa
File: ADBB651E043411ED9F02B325C4F9AE02.roa (raw, json)
Hash identifier: cVYpcEpLmW3gYRT3SsW9LPnpjNMLZz8OsKdq5PALSk0=
Subject key identifier: 90:D0:D2:44:4B:B2:DF:53:6C:93:D2:A1:82:C9:C4:C4:D1:85:30:CC
Certificate issuer: /CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515
Certificate serial: 043B
Authority key identifier: 68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/ADBB651E043411ED9F02B325C4F9AE02.roa
Signing time: Thu 05 Mar 2026 00:33:48 +0000
ROA not before: Thu 05 Mar 2026 00:33:48 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 142403
IP address blocks: 103.146.158.0/24 maxlen: 24
103.146.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl
rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 23:51:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1083 (0x43b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912859A, serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515
Validity
Not Before: Mar 5 00:33:48 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a8cf6c-954e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:83:b4:26:46:de:c2:9d:a0:0c:da:74:4e:a4:
c9:95:02:d9:a2:b8:c3:76:86:2f:f4:fe:89:44:02:
ab:ca:04:80:a3:e4:5d:07:07:91:c4:46:9d:94:6e:
7d:7a:d2:79:d1:8a:10:87:ea:97:42:75:e1:ea:67:
7f:f2:c2:4a:6a:14:5c:ef:73:6c:31:c1:9b:5e:22:
91:d4:a9:9e:c6:b6:96:0a:78:92:b9:4c:92:3c:3e:
eb:2b:4c:28:4b:8f:58:54:93:eb:24:e9:a2:ae:ca:
84:ef:34:b0:80:e4:6b:1c:1c:f5:9b:44:7d:5b:03:
87:02:af:d2:ef:0c:1a:e5:9f:b9:4e:f3:45:6a:dc:
13:1c:d6:37:a9:01:a2:9e:0a:0e:8d:cc:a3:b6:82:
42:20:67:6d:db:51:97:2f:e6:3b:30:5a:89:44:5a:
09:ed:7a:43:45:2a:b9:4a:1e:89:f3:01:58:c1:1b:
17:a1:7e:c6:bd:26:77:29:1d:5c:77:3c:c9:39:b6:
96:04:5d:82:70:80:62:25:c6:74:d3:2f:4b:43:b6:
40:fd:00:46:c7:4f:ad:c2:23:0e:ee:52:f2:75:92:
c1:c8:87:e6:ef:58:38:08:5f:73:d0:a6:1f:38:47:
db:9a:38:09:f5:41:af:98:63:00:27:bd:bc:ce:18:
ab:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D0:D2:44:4B:B2:DF:53:6C:93:D2:A1:82:C9:C4:C4:D1:85:30:CC
X509v3 Authority Key Identifier:
keyid:68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/ADBB651E043411ED9F02B325C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.146.158.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:81:71:b8:03:3b:79:bf:da:d8:8a:56:db:47:0a:b4:56:ff:
a1:3d:08:dd:0e:be:e0:f6:70:ca:ad:ea:7d:97:d8:fa:e9:9f:
17:b7:d0:83:d4:b7:f9:71:8b:1a:58:21:c4:64:80:42:ae:c3:
f7:bd:be:19:d0:5e:17:5b:af:06:c9:aa:54:f8:da:d0:d5:88:
85:f4:1f:97:4f:28:23:a9:4a:41:71:38:09:2c:8d:5d:0b:e0:
60:cf:81:8b:e8:4c:16:f6:90:42:a8:71:0c:0c:27:53:ad:ec:
8b:6e:55:02:22:c8:1a:8d:90:20:3d:a6:7b:7f:77:7c:f5:17:
82:c3:f9:8a:f9:c4:a1:09:f4:2e:b8:7c:ca:1e:61:9a:67:6f:
b0:00:3e:9d:e6:ae:3e:e4:e7:d5:a6:29:5f:df:28:29:bf:12:
3b:ba:50:1d:68:8c:5c:23:31:62:ee:2c:16:dd:53:25:fb:2b:
68:c1:9b:cd:d0:a6:46:e6:6e:e0:be:ab:6a:7e:59:0d:1e:5a:
3e:47:2d:9c:20:a4:f4:47:61:64:96:63:19:fa:4e:54:da:96:
86:fb:a3:5a:f9:52:ce:58:a1:fd:a0:8f:15:9d:98:4b:0b:2c:
5a:d0:95:ee:51:e4:01:87:65:2f:a6:c2:3f:5e:e7:1f:88:d5:
65:1a:60:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:19:03 2026 by rpki-client